Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a9/726d15-5c19-4e85-bc59-da739856cfb8/1/Cbj7kigKsFtEMuQ7lUUOc7J3PVs.mft
File: Cbj7kigKsFtEMuQ7lUUOc7J3PVs.mft (raw, json)
Hash identifier: zKHACMuA8QtwyztTy59XhDHvPVSGpsqTZXZtNh2Azxs=
Subject key identifier: 78:05:2D:1F:21:37:A5:DF:F7:00:98:35:1E:46:57:A8:B6:DE:DC:DA
Authority key identifier: 09:B8:FB:92:28:0A:B0:5B:44:32:E4:3B:95:45:0E:73:B2:77:3D:5B
Certificate issuer: /CN=09b8fb92280ab05b4432e43b95450e73b2773d5b
Certificate serial: 019E30054059CE9540F49557AC500E632BBA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Cbj7kigKsFtEMuQ7lUUOc7J3PVs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a9/726d15-5c19-4e85-bc59-da739856cfb8/1/Cbj7kigKsFtEMuQ7lUUOc7J3PVs.mft
Manifest number: 0605
Signing time: Sat 16 May 2026 09:01:50 +0000
Manifest this update: Sat 16 May 2026 09:01:50 +0000
Manifest next update: Sun 17 May 2026 09:01:50 +0000
Files and hashes: 1: 1cBxWcRD-ajLhLNgA3S5Au__sOc.roa (hash: 5ni5kkd9OlF+FGiiy/ZgvxZvVXHGX7AhkHl4yh5xEQE=)
2: Cbj7kigKsFtEMuQ7lUUOc7J3PVs.crl (hash: ZsjnunEHq+SL18FdJko5MHlS0nbWDM4tV1ZG69FaMp0=)
3: a6e3sASUiAxUoLrPtfCHLqgPz1A.roa (hash: MgKnL/M9TiKwgJnGXFmtPosWzhlu5kiGbu/gEj5vWEg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a9/726d15-5c19-4e85-bc59-da739856cfb8/1/Cbj7kigKsFtEMuQ7lUUOc7J3PVs.crl
rsync://rpki.ripe.net/repository/DEFAULT/a9/726d15-5c19-4e85-bc59-da739856cfb8/1/Cbj7kigKsFtEMuQ7lUUOc7J3PVs.mft
rsync://rpki.ripe.net/repository/DEFAULT/Cbj7kigKsFtEMuQ7lUUOc7J3PVs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 17 May 2026 09:01:50 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:30:05:40:59:ce:95:40:f4:95:57:ac:50:0e:63:2b:ba
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=09b8fb92280ab05b4432e43b95450e73b2773d5b
Validity
Not Before: May 16 09:01:50 2026 GMT
Not After : May 17 09:01:50 2026 GMT
Subject: CN=78052d1f2137a5dff70098351e4657a8b6dedcda
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b8:9f:ae:dd:60:c7:e4:f3:53:85:44:97:1b:e4:
0a:a9:f6:ce:48:d9:23:44:bb:d9:1f:61:f4:81:6a:
cf:b4:31:d3:4b:b7:7d:2b:ec:00:9c:a2:17:d9:77:
35:a0:3f:b2:88:86:2c:91:ca:03:b9:47:fd:a7:4f:
a0:ed:3c:fd:e3:bf:66:3d:cf:d5:7a:db:b8:e2:ba:
d6:e5:d5:9b:24:24:3c:3d:e8:4e:33:1e:9a:bb:ef:
42:10:5a:12:2b:38:d5:5d:9a:66:f7:fd:3d:52:9b:
db:b7:db:4d:d2:67:fb:e5:39:a4:ab:e8:4d:67:6e:
0c:7b:a6:af:3a:e3:31:1e:2b:e7:c0:84:ac:bc:3d:
fb:42:3c:e0:9c:fe:dc:d0:89:f9:48:fc:42:35:1c:
44:20:16:f1:36:1e:57:e5:ed:6f:b1:66:31:1b:8f:
f7:bb:90:09:b7:98:97:fd:40:c2:17:63:89:c9:8e:
8e:6f:c7:3a:14:67:b2:15:94:0c:80:9f:62:e3:46:
fe:11:4e:b3:ba:4c:4d:ca:1e:52:66:1c:18:73:0e:
df:70:86:02:d3:0b:58:5f:8a:bc:d2:f7:be:b3:a3:
d7:0f:f8:38:09:2d:5a:26:e2:61:a6:01:92:54:c7:
cf:a0:a0:35:73:6b:67:6a:7d:9f:ed:5c:8c:f2:27:
2f:cb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
78:05:2D:1F:21:37:A5:DF:F7:00:98:35:1E:46:57:A8:B6:DE:DC:DA
X509v3 Authority Key Identifier:
keyid:09:B8:FB:92:28:0A:B0:5B:44:32:E4:3B:95:45:0E:73:B2:77:3D:5B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Cbj7kigKsFtEMuQ7lUUOc7J3PVs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a9/726d15-5c19-4e85-bc59-da739856cfb8/1/Cbj7kigKsFtEMuQ7lUUOc7J3PVs.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a9/726d15-5c19-4e85-bc59-da739856cfb8/1/Cbj7kigKsFtEMuQ7lUUOc7J3PVs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a6:d3:c4:a8:b9:07:e7:03:ef:42:71:6c:9b:fe:41:d2:4f:14:
94:dc:cf:bf:d6:1d:30:ba:56:de:09:11:80:28:ce:7d:fa:e9:
70:14:b7:56:75:15:18:d9:cd:5a:4a:dd:27:d9:d0:be:9e:cf:
fa:5f:bd:73:0e:07:e2:e8:01:e1:48:90:bd:50:c5:6a:d1:66:
71:43:ab:7c:5b:65:b3:24:e0:ba:8d:1f:34:47:ea:d4:ec:70:
ef:f1:87:94:0d:71:fa:93:f8:eb:ff:fb:31:d5:3f:a6:f7:18:
ce:7d:e0:78:55:c2:64:34:a5:51:dc:2b:2f:0a:3e:68:82:d1:
6c:e3:98:56:a3:1a:27:68:db:a2:ce:9b:7f:89:4d:9e:f6:25:
3e:94:17:b9:03:6f:8e:6a:63:0b:8d:e6:94:b8:01:00:d6:07:
ef:30:ba:70:88:0e:bd:de:02:75:4d:03:a7:68:20:3a:3b:fe:
b0:44:3b:01:d7:6b:66:24:9a:a2:d7:e5:bb:1a:e9:a1:13:e8:
d7:b8:9e:0a:a0:43:35:bf:af:6a:79:fe:d0:21:54:92:66:66:
9b:e0:ed:18:47:6e:f3:30:4f:3a:78:b7:bb:d0:1d:25:2e:20:
eb:0d:dd:5f:57:3f:36:a6:06:b5:05:ec:52:a1:f4:c4:dd:cf:
c4:e9:ad:b2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 16 15:38:10 2026 by rpki-client